permissions on flat file php authentication
I am trying to create a secure site. Have decided to go with PHP, working fine. I am using a flat file to authenticate users, and have run into an issue. With the permissions set for all to read, one can view the file from the browers if the flat file name is know.
However, with read permissions removed, any user cannot access this file and authentication can not take place. Am i missing something here?